Server containing personal info accessed at BCIT clinic
Posted July 5, 2012 11:18 am.
This article is more than 5 years old.
BURNABY (NEWS1130) – If you have visited the Student Health Services Medical Clinic at the BCIT Burnaby campus, your personal information may have been accessed.
Someone has managed to get into the school’s records.
UBC Internet security expert Richard Rosenberg has learned that the records on this server had patient contact information and basic medical data.
His daughter is also a victim.
“The information appears to be fairly innocent and so I would think that at this point wait and see what information comes up which could only have been sourced from this system. There is not much you can do personally.”
A letter from the institute states the breach stems from movies being downloaded from that server.
BCIT is apologizing for the situation and is beefing up security in the meantime, and Dave Pinton assures students no financial information was accessed.
“Our analysis indications that to date none of the personal information has been accessed. It looks like this access actually came from outside of BCIT.”
BCIT is reviewing their security processes.
The server holds records from anyone who used the clinic between October 2005 and June 11, 2012. It includes the following information:
– Name
– Date of birth
– Medical Services Plan (MSP) number
– Personal Health Number (PHN)
– Phone number
– Address
– Treatment billing codes and descriptions
The discovery of the security breach was made during a recent audit.
“To date, it appears the only unauthorized activity that has taken place is the uploading and downloading of movies onto this server,” says a release from the college, adding the server was taken offline immediately and the hard drives were removed and analyzed.
“There is no indication that any personal information has been improperly accessed or misused; however BCIT is treating the possibility of unauthorized access to personal information very seriously,” says the college.
More than 12,000 people may be affected. You will get a letter from the school if your information has been compromised.
